Layerbb 8 CVEs across 1 Layerbb products. Browse Layerbb vulnerabilities, severities, and proof-of-concept exploits.
Layerbb products with known CVEs Layerbb CVEs — newest first CVE Severity Score Published Summary CVE-2021-47954High 8.22026-05-16 LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the se… CVE-2019-16531High 8.82019-09-20 LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php. CVE-2019-13974High 8.82019-07-19 LayerBB 1.1.3 allows conversations.php/cmd/new CSRF. CVE-2019-13973Critical 9.82019-07-19 LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. CVE-2019-13972Medium 6.12019-07-19 LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997. CVE-2018-17997Medium 6.12019-03-21 LayerBB 1.1.1 allows XSS via the titles of conversations (PMs). CVE-2018-17996Medium 6.52019-03-21 LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/del… CVE-2018-17988Critical 9.82019-03-07 LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.